Agent skills for Compliance Officers

53 agent skills are labelled for Compliance Officers work. They are listed by code score, out of 100.

All 53

policy-starter anthropics/claude-for-legal
Draft a firm AI usage policy from published model policies, adapted to your practice profile — a research-and-synthesis tool whose output is a draft for attorney review and adopti…

Verified94A
oss-review anthropics/claude-for-legal
Open source license compliance check for a dependency list, a single library, or outbound code. Use when reviewing a manifest, SBOM, or repo for copyleft obligations and license c…

Verified85A
quality-documentation-manager alirezarezvani/claude-skills
Use for QMS document control: numbering, versioning, change control or 21 CFR Part 11 e-signatures. Validates documents with document_validator.py and tracks versions with documen…

Verified84B
assuredworkloads-environment-assessor google/skills
Discover Google Cloud resource telemetry and effective Org Policies, evaluate brownfield workloads against sovereign data boundary and compliance standards (EU Data Boundary with…

Verified84B
conducting-gdpr-compliance-assessment mukul975/Anthropic-Cybersecurity-Skills
Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis…

Verified82B
performing-access-review-and-certification mukul975/Anthropic-Cybersecurity-Skills
Designs and runs access review and certification campaigns-scoping, reviewer selection, risk-based prioritization, micro-certification, and remediation tracking-to verify user acc…

Verified82B
policy-redraft anthropics/claude-for-legal
Produce a proposed marked-up policy redraft that closes a gap found by /regulatory-legal:gaps or /regulatory-legal:policy-diff. A first draft for internal review — not for direct…

Verified82B
agent-decision-receipts alirezarezvani/claude-skills
Use when an autonomous agent takes a side-effecting action (deploy, delete, pay, grant access) that may need proving later, or for EU AI Act Art. 12 record-keeping. Builds a tampe…

Verified81B
performing-privileged-account-access-review mukul975/Anthropic-Cybersecurity-Skills
Conducts systematic reviews of privileged accounts to validate access rights, identify excessive or stale permissions, and enforce least privilege across PAM infrastructure. Use w…

Verified80B
isms-audit-expert alirezarezvani/claude-skills
Use for ISO 27001 audit work: internal or surveillance audits, Annex A control evidence, Statement of Applicability, nonconformities, Stage 1 and 2 prep. Plans risk-based audits w…

Verified80B
soc2-compliance alirezarezvani/claude-skills
Use when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs Typ…

Verified80B
performing-access-recertification-with-saviynt mukul975/Anthropic-Cybersecurity-Skills
Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SO…

79B
performing-post-quantum-cryptography-migration mukul975/Anthropic-Cybersecurity-Skills
Assesses organizational readiness for post-quantum cryptography migration per NIST FIPS 203/204/205 standards. Performs cryptographic inventory scanning to identify quantum-vulner…

79B
capa-officer alirezarezvani/claude-skills
Use for CAPA work in a medical device QMS: root cause analysis (5-Why, fishbone), corrective action plans, effectiveness checks or CAPA metrics. Tracks CAPAs with capa_tracker.py…

79B
information-security-manager-iso27001 alirezarezvani/claude-skills
Use when designing or running an ISO 27001 ISMS in HealthTech or MedTech: risk assessment, control implementation, certification or security incidents. Assesses risk with risk_ass…

79B
mdr-745-specialist alirezarezvani/claude-skills
Use for EU MDR 2017/745 work: device classification under Annex VIII, technical file gaps (Annex II/III), clinical evaluation, PMS and PSUR cadence, notified body prep. Checks the…

79B
reg-gap-analysis anthropics/claude-for-legal
Diff a new or changed regulation against current privacy policy and practice — outputs a gap list and a remediation plan with owners and dates. Use when a new reg drops, the user…

79B
regulatory-affairs-head alirezarezvani/claude-skills
Use for medical device market access strategy: FDA 510(k), De Novo or PMA packages, CE marking under MDR, pre-sub meetings, agency deficiency responses or multi-market plans. Anal…

78B
quality-nonconformance affaan-m/ECC
Quality control and non-conformance management for regulated manufacturing (FDA 21 CFR 820, IATF 16949, AS9100): NCR lifecycle and disposition, 5-Why/Ishikawa/fault-tree/8D root c…

77B
ncr-writeup anthropics/claude-plugins-official
Writes the nonconformance report: what was found and measured, the specific requirement it violates cited to its document and locator, how many parts are actually suspect and why…

77B
assured-workloads-basics google/skills
Provisions, inspects, updates, and deletes Google Cloud Assured Workloads V1 compliant folders, CMEK settings, Sovereign Controls by Partners, and service usage restrictions. Use…

77B
assuredworkloads-frameworks-navigator google/skills
Acts as a Data Boundary Compliance Analyst that maps user compliance queries against Data Boundary Frameworks and cloud controls, validates matched resources, and recommends appro…

77B
dpa-review anthropics/claude-for-legal
Review a Data Processing Agreement against your DPA playbook — auto-detects whether you're processor or controller and applies the right half of the playbook. Use when the user sa…

77B
achieving-cmmc-level-2-compliance mukul975/Anthropic-Cybersecurity-Skills
Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compu…

76B
qms-audit-expert alirezarezvani/claude-skills
Use for ISO 13485 internal audits: planning the program, running an audit, classifying findings or preparing for an external audit. Optimizes the schedule with audit_schedule_opti…

76B
quality-manager-qms-iso13485 alirezarezvani/claude-skills
Build or maintain an ISO 13485 medical device QMS: design, documentation, CAPA, audit prep. Use whenever the user faces a 13485 certification audit or needs quality procedures.

76B
assuredworkloads-frameworks-author google/skills
Authors custom cloud controls and customized frameworks for Assured Workloads when built-in resources cannot satisfy core requirements. Use when creating or synthesizing custom da…

76B
aia-generation anthropics/claude-for-legal
Run an AI impact assessment — structured intake, risk analysis, regulatory classification per regime in scope, policy consistency diff, and recommendation with conditions. Uses th…

76B
policy-diff anthropics/claude-for-legal
Diff a specific regulatory change against the indexed policy library. Use when a reg has changed and you need to know which policies it touches and what the gap is, when the user…

76B
root-cause-capa anthropics/claude-plugins-official
Reads sensor history, inspection measurements, maintenance records and prior tickets onto one verified timeline, runs the pattern checks in code rather than by eye — SPC drift, cl…

75B
compliance-check anthropics/knowledge-work-plugins
Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use when launching a fe…

75B
eu-ai-act-specialist alirezarezvani/claude-skills
Use for EU AI Act (Regulation 2024/1689) compliance work: classifying an AI system's risk tier, planning the Art. 43 conformity route and Annex IV file, or listing obligations by…

75B
risk-management-specialist alirezarezvani/claude-skills
Use for ISO 14971 medical device risk management: hazard analysis, FMEA, fault trees, risk controls, benefit-risk or residual risk. Runs fmea_analyzer.py and risk_matrix_calculato…

75B
dsar-response anthropics/claude-for-legal
Walk through a Data Subject Access Request (or deletion, portability, correction request) and draft the response — verify identity, locate data system-by-system, assess exemptions…

75B
pia-generation anthropics/claude-for-legal
Generate a Privacy Impact Assessment in house format for a new feature, product, or processing activity, using the structure learned from your seed PIA. Use when the user says "wr…

75B
use-case-triage anthropics/claude-for-legal
Quickly determine whether a processing activity needs a PIA, a mandatory GDPR DPIA, or can proceed — surfaces privacy policy conflicts and routes to the right next step. Use when…

75B
iso42001-specialist alirezarezvani/claude-skills
Use for ISO/IEC 42001 AI management system work: gap analysis against Clauses 4-10, the AI risk register and Annex A controls, or the internal audit plan. Runs aims_gap_analyzer.p…

74B
vendor-management alirezarezvani/claude-skills
Use when scoring or auditing vendors: scorecards, SLA compliance and service credits, third-party risk tier or a tier-1 vendor review. Runs vendor_scorer.py, sla_compliance_tracke…

74B
managing-third-party-vendor-risk mukul975/Anthropic-Cybersecurity-Skills
Build and run a third-party/vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM: inventory and tier vendors, issue SIG/CAIQ questionnaires, review SOC 2/ISO 27…

73B
quality-manager-qmr alirezarezvani/claude-skills
Use for QMR duties under ISO 13485 5.5.2: management review, quality policy and objectives, quality KPIs and cost of quality. Tracks reviews with management_review_tracker.py and…

73B
privacy-policy phuryn/pm-skills
Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review. Use when creating a privacy policy, updati…

73B
reg-feed-watcher anthropics/claude-for-legal
Check regulatory feeds now and report what's new since the last check, filtered by your materiality threshold. Use when the user says "check the feeds", "what's new", "regulatory…

73B
vendor-ai-review anthropics/claude-for-legal
Review vendor AI terms — agreement, addendum, or ToS AI provisions — against your governance positions; flag training-on-data, liability, model changes, and AI policy consistency.…

73B
implementing-hipaa-security-rule-safeguards mukul975/Anthropic-Cybersecurity-Skills
Implement the HIPAA Security Rule (45 CFR Part 164 Subpart C) to protect electronic protected health information (ePHI): conduct the required risk analysis, deploy the administrat…

72B
customs-trade-compliance affaan-m/ECC
Codified customs and trade compliance expertise — HS/HTS tariff classification with GRI rules, commercial invoices and entry documentation, Incoterms 2020, FTA qualification and d…

71B
implementing-gdpr-data-subject-access-request mukul975/Anthropic-Cybersecurity-Skills
Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across databases and files using regex and NER, data mapping, response t…

71B
performing-entitlement-review-with-sailpoint-iiq mukul975/Anthropic-Cybersecurity-Skills
Runs entitlement review and access certification campaigns in SailPoint IdentityIQ, covering manager certifications, targeted entitlement reviews, role-based access validation, se…

70B
incident-reporting-navigator davila7/claude-code-templates
Use when a security incident, data breach, or actively exploited vulnerability raises the question "who must we notify, where, and by when?" Screens one incident across the EU rep…

70B
access-lifecycle alirezarezvani/claude-skills
Use when preparing or running a user access review, checking that leavers lost their access, finding orphaned or ownerless service accounts, answering an auditor's access-control…

70B
cmmc-readiness alirezarezvani/claude-skills
Use when a defense contractor or subcontractor is preparing for a CMMC 2.0 Level 2 self-assessment or C3PAO assessment, calculating or checking an SPRS score against NIST SP 800-1…

70B
fda-consultant-specialist alirezarezvani/claude-skills
Use for FDA medical device questions: 510(k) vs De Novo vs PMA, predicates and substantial equivalence, QMSR (21 CFR 820), HIPAA or device cybersecurity. Runs fda_submission_track…

70B
medical-device-software alirezarezvani/claude-skills
Use for any question about the software inside a medical device, SaMD or regulated health app - which IEC 62304 safety class (A/B/C) it is and how much process and documentation t…

70B
policy-monitor anthropics/claude-for-legal
Keep the privacy policy current with practice. Two modes: weekly sweep of saved PIAs, DPA reviews, and triage results to find policy drift; or direct query for a proposed new prac…

70B

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.